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THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE PROPERTY 
OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS: 

1 . A method for generating a shared secret value between entities (A,B) in a data 
communication system, one or more of said entities having a plurality of members (Ai, B,) for 
participation in said communication system, each member having a long temi private key and 
a corresponding long tenn public key said method comprising the steps of: 

(a) generating an entity long tcnn private key and corresponding entity long tcmi public 
key for each entity by combining the long term private and public keys of each 
members of the entity, 

(b) generating a short term private and a corresponding short term public key for each of 
the members; 

(c) exchanging short term public keys of the members within an entity; 

(d) for each member: 

i. computing an intra-entity shared key by mathematically combining said short 
term public keys of each said member; 

ii. computing an intra-entity public key by mathematically combining its short - 
term private key, the long term private key and said intra-entity shared key; 

(e) for each entity combining intra-entity public keys to derive a group short-term public 
key; 

(f) each entity transmitting its intra-entity shared key and its group short term public key 
to said other entities; and 

(g) each entity computing a common shared key K by combining its group short term 
public key, with the intra-entity shared key, and an entity long term public key 
received &om the other entity. 

2. A method as defined in claim 1 , said long term public key being derived ftom a generator 
point P and respective ones of said long term private keys, 

3. A method as defined in claim 2, said step (a) including each member selecting a random 
integer Xj and multiplying said point P by a to obtain xjP, the short term public key. 
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4. A method as defined in claim 3, said intra-entity-shared key being computed by summing 
said short term public keys. 

5. A method as defined in claim 4, said intra-entity public key si being derived by computing 
Si= Xi + a; f{ZxiP), where f is a hash function 

6. A method as defined in claim 5, eaid group short term public key being derived by 
computing Z Si. 

7. A method as defined in claim 1, said long temi public keys being derived fi-om a generator g 
and respective ones of said long term private keys. 

8. A method as defined in claim 7, said step (a) including the step of each member selecting a 
random integer (x^* ) and exponentiating a function h(g) including said generator to a pov/er 
g(xij) to obtain the short term public key Xjj = h(g) ^^'^^\ 

9. A method as defined in claim 8, said intra-entity shared key (XO being computed by each 
entity multiplying each of its short-term pubUc keys together. 

10. A method as defined in claim 1> including the step of exchanging the entity long term public 
key between entities. 



1 1, A method as defined in claim 10, each entity computing a common shared key K by 

combining its group short term public key (Si), with the intra-entity shared key (Xi ) , and an 
entity long tenn public key received &om the other entity. 



